#stop ddos

http://www.r00t-services.net/knowledgebase/12/How-to-Block-DDoS.html

What are DDoS Attacks? DDoS attacks (Distributed Denial of Service attacks) have the sole purpose of bringing down your server. In most cases a botnet is being used, which is a large farm of infected computers and servers. The attacker is able to control all of these infected machines using a C&C (command and control) server. This C&C server can be accessed through an IRC channel, DNS, peer to peer or a web-based panel. IRC and web panels are most common. Now the attacker can make his bots/zombies (infected machines) send as many requests as possible to a domain or IP address, which could be your server. Depending on the type of bot, it can be either a volumetric network layer (Layer 3) attack or an application layer (Layer 7) attack. Network level (volumetric) layer 3-4 attacks Network layer attacks usually have the purpose to overload your whole server, by either sending large packets to saturate your uplink, or sending many small packets to overload your CPU and use up all TCP sockets. In both cases they will just send as many packets as possible to get your server down. Network layer attacks with many small packets are mostly SYN/ACK attacks, while for large packets attackers mostly use the UDP protocol. If your uplink is saturated or your CPU is overloaded, your server will not be able to get a network connection and not respond anymore, you will probably have a lot of traffic costs and your provider will block your server. Application level (layer 7) attacks Application layer attacks are far more advanced than network layer attacks. They aim at a specific service on your server and try to overload it, by sending requests to the application instead of just flooding the whole server with packets. This type of attack does far more damage than a... Continue